?
Solved

Time sync within domain servers and workstations

Posted on 2011-03-23
9
Medium Priority
?
820 Views
Last Modified: 2012-05-11
I think I have confused myself beyond belief or I am not comprehending this the right way, so I am reaching out to the experts for some help and guidance. The problem I am havnig  is only some of the workstatins within my domain are an hour behind after daylight savings time (EST). I have done everything from 'net time' to see where the workstation is getting its time from, to trying registry changes on the servers and group policies to try and fix the problem. Some background, I have 4 DC's (Lets call them A, B, C, and D) in a child domain. I have no access to make any changes within the forrest, and the PDC of the forrest resides in the UK. Three of my DC's (A, B, C) including my domains PDC (A) look to the PDC of the forrest per the 'w32tm /monitor' command. My remaining DC (D) looks at the child domain PDC (A), I am not sure if this is right and the others are wrong, the time is right on this last DC (D). This is where I think the problem is, the workstations that are an hour behind, when I do a 'net time', they point to this DC (D), and give me this from any workstation and server including my domains PDC:

Current time at \\DomaniControllerD is 3/23/2011 12:55 PM
Local Time <GMT-4:00> at  \\DomaniControllerD is 3/23/2011 1:55 PM

So basically how can I get my servers setup to sync time the proper way and then have this filter down to the workstations?
0
Comment
Question by:MrMagina
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
9 Comments
 
LVL 39

Accepted Solution

by:
Philip Elder earned 1000 total points
ID: 35201162
Are all systems up to date with the DST patches?

It sounds like some may not have the appropriate Daylight Savings Time updates installed.

Philip
0
 

Author Comment

by:MrMagina
ID: 35201175
Is this something that would have to be done on a per workstation basis, or could it be distributed through WSUS?
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 1000 total points
ID: 35201190
Are these boxes patched regularly, the reason I ask is because there are patches, for server 2003 for example

http://support.microsoft.com/kb/951072

http://support.microsoft.com/gp/dst_topissues

What is interesting is that before the rules were changed clocks would have been changed the first weekend in April so they may update in two weeks.

Thanks

Mike
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 39

Expert Comment

by:Philip Elder
ID: 35201209
WSUS will have a catalogue and status for the DST updates in your org.

Philip
0
 

Author Comment

by:MrMagina
ID: 35201478
Thanks guys, I am going to work on this and let you know how I made out.
0
 

Author Comment

by:MrMagina
ID: 35206914
I was able to apply the patch and also distribute it through my WSUS and all seems to be working just fine, so thank you for your help. One last question to follow up with one of my problems. Why do three fo my four servers look to the forest PDC and the one DC looks at the Child domain PDC?
0
 
LVL 11

Expert Comment

by:sighar
ID: 35207080
In every domain there's a DC holding the PDC Emulator role. That DC is the timesource for the rest of the DCs in the domain. The PDC Emulator should then be configured to look outside the domain for it's timesource.

If the setup is as you say, then someone must have configured them to look at other DCs as a timesource. It makes a certain sense to let the subdomain PDCs look to the forest domain PDC but is not necessary.
0
 

Author Comment

by:MrMagina
ID: 35207096
Right that I understand, but its only one of the four DC's looking to the Child PDC rather than like the others looking at the Forrest PDC
0
 

Expert Comment

by:sandeep1025
ID: 35208081
Try installing the Domain Time Client II , the Full client on a server and the thin client workstations , configure the workstations to refer to the Domain Time server  , you can configure the Domain Time server to sync with an external source for e.g. time.ntp.org
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question